312-50V12 · Question #260
In the process of footprinting a target website, an ethical hacker utilized various tools to gather critical information. The hacker encountered a target site where standard web spiders were…
The correct answer is D. User-directed spidering with tools like Burp Suite and WebScarab. The hacker likely used user-directed spidering with proxy tools to map the website by manually browsing, effectively circumventing automated spider restrictions and monitoring real-time traffic.
Question
Options
- AUsing the Netcraft tool to gather website information
- BExamining HTML source code and cookies
- CUsing Photon to retrieve archived URLs of the target website from archive.org
- DUser-directed spidering with tools like Burp Suite and WebScarab
How the community answered
(28 responses)- A4% (1)
- C4% (1)
- D93% (26)
Why each option
The hacker likely used user-directed spidering with proxy tools to map the website by manually browsing, effectively circumventing automated spider restrictions and monitoring real-time traffic.
Netcraft is primarily an online service for gathering publicly available information about web servers and technologies, not a tool for interactive user-directed spidering or bypassing `robots.txt` through manual browsing and traffic monitoring.
Examining HTML source code and cookies is a passive analysis method that provides insights into client-side technologies but does not actively uncover all files and web pages by monitoring live network traffic during manual browsing.
Retrieving archived URLs from archive.org is a technique for historical data reconnaissance and does not involve real-time monitoring of traffic or active discovery of current web pages through manual interaction with the live site.
User-directed spidering, often facilitated by web proxy tools like Burp Suite or WebScarab, allows an ethical hacker to manually navigate a website while the tool intercepts and records all requests and responses. This technique enables the discovery of web pages and files as the user interacts with them, bypassing restrictions like `robots.txt` that block automated spiders, and simultaneously monitors all incoming and outgoing traffic.
Concept tested: User-directed web spidering and traffic analysis
Topics
Community Discussion
No community discussion yet for this question.